
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.mft
File: rLhNci0lVbSDPOQGgw_b_pgrfGY.mft (raw, json)
Hash identifier: jjRfw5sRlf8WJBvWjVg8VNglpZdiobIZDpnXT+aWoFY=
Subject key identifier: 5A:A0:BC:D6:19:2A:04:5A:DE:A7:CF:36:80:E0:D6:A8:99:4D:8F:C0
Authority key identifier: AC:B8:4D:72:2D:25:55:B4:83:3C:E4:06:83:0F:DB:FE:98:2B:7C:66
Certificate issuer: /CN=A9180669/serialNumber=ACB84D722D2555B4833CE406830FDBFE982B7C66
Certificate serial: EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLhNci0lVbSDPOQGgw_b_pgrfGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.mft
Manifest number: EC
Signing time: Mon 03 Aug 2026 07:48:09 +0000
Manifest this update: Mon 03 Aug 2026 07:48:08 +0000
Manifest next update: Mon 10 Aug 2026 07:48:08 +0000
Files and hashes: 1: rLhNci0lVbSDPOQGgw_b_pgrfGY.crl (hash: pXZbEagqV+3ygLkwMuLzKF1czgye9oN1MMtKdEt5+NM=)
2: 7D1BFC5E24B411F08834DE10C4F9AE02.roa (hash: 1KI+aZbE9Mv6odog4v9f/D+YWvSf6u1v6UudyMifRKo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.crl
rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLhNci0lVbSDPOQGgw_b_pgrfGY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Aug 2026 07:48:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239 (0xef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180669, serialNumber=ACB84D722D2555B4833CE406830FDBFE982B7C66
Validity
Not Before: Aug 3 07:48:08 2026 GMT
Not After : Aug 10 07:48:08 2026 GMT
Subject: CN=6a7047b9-4acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:28:14:6e:e4:b9:19:a0:16:6b:f0:f2:fc:fb:
72:97:08:d1:27:ee:70:b1:5a:68:28:f5:40:e7:6d:
37:ad:9b:fe:19:5d:be:27:32:35:27:da:7a:07:87:
91:ba:a6:bb:fc:1d:11:f5:d5:b7:73:6b:80:e6:dc:
cb:71:a5:d5:3c:e4:63:6d:f6:49:76:08:b6:d9:a3:
9a:6f:4f:bc:6e:a2:5a:be:54:9f:14:e6:35:36:95:
28:12:ee:dc:f0:e8:9d:fd:9b:5e:22:85:ea:3f:b4:
d8:fe:e2:3f:6e:a0:08:b0:4d:a6:c1:f3:c6:69:a9:
ed:fe:8b:de:df:4c:70:ae:cc:7e:d6:cd:b8:c7:de:
b3:56:bc:19:a7:01:24:5b:b6:d7:6d:7b:c0:23:d3:
d2:98:92:05:d9:1a:7c:f2:98:70:de:b4:37:70:ab:
13:34:6b:f5:d6:ec:9d:12:02:f1:3c:6c:8d:4e:7e:
2c:b8:40:00:f4:0d:fe:07:cc:23:41:37:60:ed:ab:
62:a7:f3:ac:62:f5:aa:0e:27:66:f3:f7:62:c7:89:
08:56:39:c8:7a:85:46:37:4b:64:ee:c6:ff:7a:4d:
20:84:0f:2e:4e:25:05:6e:ce:6e:9c:e8:d8:63:c3:
a7:29:75:83:12:74:bd:69:49:0a:b7:d5:a1:dd:15:
29:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A0:BC:D6:19:2A:04:5A:DE:A7:CF:36:80:E0:D6:A8:99:4D:8F:C0
X509v3 Authority Key Identifier:
keyid:AC:B8:4D:72:2D:25:55:B4:83:3C:E4:06:83:0F:DB:FE:98:2B:7C:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLhNci0lVbSDPOQGgw_b_pgrfGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:81:c0:ca:92:37:47:13:fe:94:9c:08:39:d0:bc:0e:3a:18:
c0:16:f8:cf:8a:82:39:e9:9d:02:ee:35:92:30:d5:94:18:10:
42:cd:c4:39:ed:40:f9:fa:b5:d9:28:9d:16:ac:83:f4:5d:f0:
95:e0:7d:d8:1d:2f:bc:9c:6f:1f:2f:ac:ec:df:59:1b:97:a0:
b4:02:07:a0:91:c3:6b:46:65:d6:67:da:09:98:28:31:9d:5c:
94:d6:4f:80:17:89:21:de:0f:63:b2:14:f0:09:cc:60:3a:46:
bc:d0:74:19:d9:ec:cf:35:4a:96:5b:f2:a4:54:cb:5b:e5:ac:
26:31:f5:47:f8:46:b3:24:ca:65:58:c4:85:f8:ba:a1:5e:96:
09:51:49:ce:90:9a:02:e5:8a:76:ff:22:e1:26:51:d0:9c:3f:
1e:ad:b2:75:ff:c1:19:c6:91:16:82:ac:78:83:d8:6d:20:91:
b7:32:6a:ce:d2:65:79:45:41:5a:33:39:b7:af:dd:27:ca:8d:
38:f8:02:f2:79:b1:52:e3:58:17:78:66:a3:32:a6:98:11:f1:
6f:7b:2d:3b:95:31:6e:67:2f:4e:06:5c:3b:20:ed:cd:93:91:
41:ba:f0:d6:cd:93:78:1b:b4:b9:84:b0:62:7e:10:4e:ed:5a:
74:0a:10:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 21:02:47 2026 by rpki-client